8349 matches found
CVE-2020-36188
Description FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource How to RCE pom.xml root@kitploit: com.fasterxml.jackson.core jackson-databind 2.9.10.7...
CVE-2026-86452
creationtimestamp| type| source ---|---|--- 2026-09-07 13:47:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ji3cndbjq65jp 2026-09-12 18:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvdoctjdhs24...
CVE-2026-86451
creationtimestamp| type| source ---|---|--- 2026-09-07 13:35:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ccxurbhumciz6...
CVE-2026-56740
A flaw was found in the JLine3 Telnet server remote-telnet module. An unauthenticated remote attacker can exploit this vulnerability by injecting an excessive number of environment variables through the Telnet NEW-ENVIRON option. This action causes the server to store numerous variable pairs,...
CVE-2022-24734
CVE-2022-24734 PoC An RCE can be obtained on MyBB's Admin CP in Configuration - Add New Setting. The user must have a rights to add or update setting. This is tested on MyBB 1.8.29. Sources: https://github.com/mybb/mybb/ https://vulners.com/cve/CVE-2022-24734...
CVE-2026-86238
creationtimestamp| type| source ---|---|--- 2026-09-07 01:49:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/c3nfrfbmymhgh...
CVE-2026-86259
creationtimestamp| type| source ---|---|--- 2026-09-06 14:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3muu5qfieq42p 2026-09-06 14:20:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muu6tdc6pg2f...
PT-2026-86570
A vulnerability was identified in D-Link DIR-605 B1v202WWB03. This issue affects the function tunnel set params of the file progs.gpl/pppd.alpha/l2tp/tunnel.c of the component L2TP Control Message Parser. Such manipulation of the argument peer hostname leads to off-by-one. The attack may be...
CVE-2026-86166
creationtimestamp| type| source ---|---|--- 2026-09-05 18:05:50+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117219757253901773 2026-09-06 05:46:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7vnlfkoyzfdv2...
CVE-2026-86121
creationtimestamp| type| source ---|---|--- 2026-09-05 10:40:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3murc33ejhe2f 2026-09-05 11:01:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3murdarm3sf2w 2026-09-05 11:03:00+00:00| seen|...
CVE-2026-85769
creationtimestamp| type| source ---|---|--- 2026-09-05 07:00:03+00:00| seen| Telegram/z32s08izA0c5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0 2026-09-06 00:00:53+00:00| published-proof-of-concept| Telegram/z32s08izA0c5nX8KIcxgAI90dxl3nICqf5s2ZsFpU7m2f0...
ROOT-OS-UBUNTU-2204-CVE-2026-64464 CVE-2026-64464 in linux - Patched by Root
Root has patched CVE-2026-64464 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
PT-2026-86468
Name of the Vulnerable Software and Affected Versions Tenda HG10 affected versions not specified Description A remote buffer overflow exists in the formURL function within the /boaform/admin/formURL endpoint. This issue occurs when the Keywd/urlFQDN argument is manipulated, potentially allowing a...
CVE-2026-85654
creationtimestamp| type| source ---|---|--- 2026-09-04 22:01:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mupxnu7m6m2m 2026-09-08 18:30:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3muznq5uzq42v 2026-09-08 18:30:05+00:00| seen|...
CVE-2026-80119
creationtimestamp| type| source ---|---|--- 2026-09-04 20:01:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mupqxskiz62g 2026-09-10 04:20:45+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mv577dvbel2x 2026-09-10 04:20:47+00:00| seen|...
AZL-99669 CVE-2026-80806 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: ext4: don't enable DAX on new encrypted files Currently, when a new encrypted regular file is created, the call to ext4setinodeflagsinode, init=true in ext4newinode is made before EXT4INODEENCRYPT is set. As a result, it can set...
CVE-2026-85625
sift sift.js 17.1.3 enumerates query keys with for...in, which walks the object prototype chain, and dispatches any matched operator key including $where. The $where operation compiles a string value into a function using new Function unless CSPENABLED is set not set by default. As a result, if a...
CVE-2026-85625 sift 17.1.3 Prototype Pollution Remote Code Execution via $where
sift sift.js 17.1.3 enumerates query keys with for...in, which walks the object prototype chain, and dispatches any matched operator key including $where. The $where operation compiles a string value into a function using new Function unless CSPENABLED is set not set by default. As a result, if a...
CVE-2026-85625
sift (sift.js) 17.1.3 is vulnerable to remote code execution due to its use of for...in to enumerate query keys, which walks the object prototype chain and dispatches any matched operator key including $where . The $where operator compiles a string value into a function via new Function unless CS...